Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/51B16CB75D4CA1C8829FB12C9B126FA86274E055.cer
File:                     51B16CB75D4CA1C8829FB12C9B126FA86274E055.cer (raw, json)
Hash identifier:          p8O6fsoZbRalQT4zj6Hs98B0//DERxLiHV83FLH0dUk=
Subject key identifier:   51:B1:6C:B7:5D:4C:A1:C8:82:9F:B1:2C:9B:12:6F:A8:62:74:E0:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04B73C1E104BB0065B7D3AF21CC1673D68E95EDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/51B16CB75D4CA1C8829FB12C9B126FA86274E055.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 21:19:04 +0000
Certificate not after:    Mon 02 Dec 2024 21:24:04 +0000
Subordinate resources:    AS: 265080
                          IP: 170.233.120.0/22
                          IP: 2804:3278::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b7:3c:1e:10:4b:b0:06:5b:7d:3a:f2:1c:c1:67:3d:68:e9:5e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 21:19:04 2023 GMT
            Not After : Dec  2 21:24:04 2024 GMT
        Subject: CN=51B16CB75D4CA1C8829FB12C9B126FA86274E055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:58:61:a9:fe:6e:b9:34:51:42:69:c4:5c:
                    42:bb:7d:a9:aa:f8:e9:b8:a0:d8:1c:27:10:58:43:
                    6d:eb:4d:98:41:d5:6b:8f:bc:7d:44:60:77:8e:c5:
                    9e:83:74:4e:38:5e:a9:c7:17:11:4e:10:c2:29:c3:
                    96:4b:d2:eb:f5:e1:ce:53:bb:18:6d:b5:8e:87:18:
                    c7:ce:5a:52:73:39:e5:08:98:99:41:45:93:cc:45:
                    c0:23:7c:6e:fc:8d:06:52:a0:dc:c3:dc:21:04:0e:
                    1e:7c:92:c1:b2:ed:e5:77:cd:09:d7:5a:bc:28:c2:
                    5a:ed:a6:9a:08:28:0a:4b:5c:76:17:b0:43:89:32:
                    c1:f9:2a:76:48:18:33:52:9f:58:aa:3e:06:78:fb:
                    c3:d0:50:23:e0:6a:d6:2b:56:68:49:34:b9:2a:71:
                    9e:ac:42:5c:66:1b:f3:37:78:8d:25:6b:e1:6c:dc:
                    48:b8:a6:e0:69:df:44:67:54:0d:97:e6:27:4c:f5:
                    0f:d2:43:1a:f5:75:74:3f:8f:b5:70:42:bf:7d:f2:
                    c2:51:b2:92:ec:fe:36:e9:53:85:01:ef:1d:47:c1:
                    c6:64:8a:9b:02:15:d1:a4:4f:8c:27:46:8e:53:2a:
                    4b:2a:b8:6f:00:2b:8d:d1:c4:30:fd:b5:c0:6d:e6:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:B1:6C:B7:5D:4C:A1:C8:82:9F:B1:2C:9B:12:6F:A8:62:74:E0:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/51B16CB75D4CA1C8829FB12C9B126FA86274E055.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.120.0/22
                IPv6:
                  2804:3278::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265080

    Signature Algorithm: sha256WithRSAEncryption
         b1:3f:60:fc:ba:1f:40:8b:ca:70:e1:62:e5:48:25:21:72:f9:
         a4:dd:4a:0b:a0:55:d7:6c:25:6a:c6:ee:5a:fd:8e:aa:44:d6:
         f2:4a:aa:b1:d3:59:1c:ad:ac:7b:5f:62:e5:a0:94:c2:2e:ed:
         91:10:cf:3b:d1:66:f4:83:9d:48:a4:12:79:8a:7a:0a:87:cf:
         a0:80:72:bb:c1:12:41:9f:04:fd:6c:ca:2d:d0:f7:13:c0:bc:
         c3:d7:38:17:c8:b2:d0:71:98:f5:a1:89:9a:2a:94:43:c9:79:
         be:87:6c:1e:8f:8a:77:5b:08:6b:e4:de:78:2a:ef:ef:e4:84:
         25:8e:43:f3:3c:d3:04:7b:e4:60:50:2a:ae:2b:73:42:14:24:
         21:5e:74:ff:3f:78:8c:77:af:a9:8c:37:68:c1:cf:29:e2:14:
         75:09:2a:3a:16:9c:f2:32:34:4a:be:6b:13:b7:64:91:b5:bd:
         e8:17:5b:74:a0:0c:33:b7:2f:30:84:1d:9b:aa:eb:6e:3a:0b:
         28:62:01:fb:32:1c:a4:e1:b1:5e:6b:62:3f:ad:a8:ab:cc:45:
         b4:95:0a:4d:7e:b3:28:23:65:4f:72:ac:33:0c:5a:99:6a:1e:
         09:31:7b:1c:16:ee:e8:d7:d3:5a:88:77:21:0c:fe:db:6b:39:
         7d:c5:53:97
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBLc8HhBLsAZbfTryHMFnPWjpXt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDQyMTE5MDRaFw0yNDEyMDIyMTI0MDRaMDMxMTAvBgNV
BAMTKDUxQjE2Q0I3NUQ0Q0ExQzg4MjlGQjEyQzlCMTI2RkE4NjI3NEUwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK4lhhqf5uuTRRQmnEXEK7famq
+Om4oNgcJxBYQ23rTZhB1WuPvH1EYHeOxZ6DdE44XqnHFxFOEMIpw5ZL0uv14c5T
uxhttY6HGMfOWlJzOeUImJlBRZPMRcAjfG78jQZSoNzD3CEEDh58ksGy7eV3zQnX
WrwowlrtppoIKApLXHYXsEOJMsH5KnZIGDNSn1iqPgZ4+8PQUCPgatYrVmhJNLkq
cZ6sQlxmG/M3eI0la+Fs3Ei4puBp30RnVA2X5idM9Q/SQxr1dXQ/j7VwQr998sJR
spLs/jbpU4UB7x1HwcZkipsCFdGkT4wnRo5TKksquG8AK43RxDD9tcBt5iVTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRsWy3XUyhyIKf
sSybEm+oYnTgVTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GRlhrTGthS1hIZXJYTHBmVUFzbzczNnJRRWVucU1waXY2
UWVoRndtVTF2Vy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2
NlFlaEZ3bVUxdlcvMC81MUIxNkNCNzVENENBMUM4ODI5RkIxMkM5QjEyNkZBODYy
NzRFMDU1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKq6XgwDQQCAAIwBwMF
ACgEMngwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAt4MA0GCSqGSIb3DQEBCwUA
A4IBAQCxP2D8uh9Ai8pw4WLlSCUhcvmk3UoLoFXXbCVqxu5a/Y6qRNbySqqx01kc
rax7X2LloJTCLu2REM870Wb0g51IpBJ5inoKh8+ggHK7wRJBnwT9bMot0PcTwLzD
1zgXyLLQcZj1oYmaKpRDyXm+h2wej4p3Wwhr5N54Ku/v5IQljkPzPNMEe+RgUCqu
K3NCFCQhXnT/P3iMd6+pjDdowc8p4hR1CSo6FpzyMjRKvmsTt2SRtb3oF1t0oAwz
ty8whB2bqutuOgsoYgH7Mhyk4bFea2I/rairzEW0lQpNfrMoI2VPcqwzDFqZah4J
MXscFu7o19NaiHchDP7bazl9xVOX
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:58:12 2025 by rpki-client